CVE-2026-20871 Desktop Window Manager Elevation of Privilege Vulnerability

...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2022-42778

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed...

CVE-2025-55681 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2025-55681 Desktop Window Manager Elevation of Privilege Vulnerability

...

EUVD-2022-45841

Malicious code in bioql PyPI...

May 13, 2025—KB5058385 (OS Build 20348.3692)

None None...

CVE-2025-50153

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-53152

CVE-2025-53152 is a local-use-after-free vulnerability in the Desktop Window Manager (DWM) of Windows that enables an authenticated attacker to execute code locally. The CVSS v3.1 score indicates local access with low privileges and no user interaction, but high impact to confidentiality, integri...

CVE-2025-53152 Desktop Windows Manager Remote Code Execution Vulnerability

...

CVE-2025-50153 Desktop Window Manager Elevation of Privilege Vulnerability

...

PT-2025-32776 · Microsoft · Desktop Windows Manager +1

Name of the Vulnerable Software and Affected Versions: Desktop Windows Manager affected versions not specified Description: A use after free issue exists in the Desktop Windows Manager that could allow an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is ...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

PT-2025-32817 · Microsoft · Desktop Windows Manager +1

Name of the Vulnerable Software and Affected Versions: Desktop Windows Manager affected versions not specified Description: A use after free issue exists in Desktop Windows Manager that could allow an authorized attacker to execute code locally. Recommendations: At the moment, there is no...

CVE-2023-21348

In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...

CVE-2022-42778

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed...

CVE-2022-42778

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed...

Design/Logic Flaw

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed...

CVE-2022-42778

In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed...

PT-2022-26570 · Microsoft · Windows Manager Service

Name of the Vulnerable Software and Affected Versions: Windows Manager Service affected versions not specified Description: A missing permission check in the Windows Manager Service could allow it to be set up without requiring additional execution privileges. Recommendations: At the moment, ther...